← Onshape

Can an agent create a CAD document with Onshape REST API?

A person steps in at setup: a person tells it where the interface is or how to call it, a person hands over a key or token, a person signs up or registers a client for it and a person replaces or revokes its access when it must change. Job reachable, not yet run.

observedProbed revision sha256:c3d13731bf4f…

Who does each step

Whether the agent handles it alone or a person has to step in.

  1. 01

    Discover

    Workaround · setup

    An agent cannot find the job's interface, or how to call it, from the vendor's machine-readable documents; a person tells it once.

  2. 02

    Authority

    Workaround · setup

    A person hands the agent a key or token.

  3. 03

    Onboard

    Workaround · setup

    A person signs up, or registers a client, for the agent.

  4. 04

    Pay

    Not applicable

    Nothing to pay for the job.

  5. 05

    Confirm

    Machine

    A failure comes back typed, in its answer or as its spec declares, so an agent can tell a failure from a success.

  6. 06

    Sustain

    Workaround · setup

    A person replaces or revokes the agent's access when it must change.

A person once, at Discover: telling the agent where the interface is or how to call it.

A person once, at Authority: handing over a key or token.

A person once, at Onboard: signing up or registering a client for the agent.

A person once, at Sustain: renewing, replacing or revoking its access.

Not A+ yet: a descriptor on www.onshape.com for Onshape REST API, with a spec that covers the job, would let an agent find it alone; OAuth that lets an agent register its own client would turn handing over a key or token into a one-time consent; a way for agents to register (auth.md, a sign-up API, or OAuth with client registration) would let the agent register itself; a key-management API, or OAuth refresh and revocation, would let the agent keep its access alive.

Agent surfaces

1 kind · 1 entry
APIThe job's request went here

The probe

13 Oct 2026 · 09:24 UTC · 56.49 s

Each request it sent and what came back; the descriptors it read, counted, with what they named.

Discover29 descriptor reads0 facts
This endpoint
cad.onshape.com/api/v17 is named by none of them
Job requestPOST cad.onshape.com/api/v17/documents401248 ms
Request
POST https://cad.onshape.com/api/v17/documents
Response
401 · application/json · 55 bytes
Body
sha256:ae0fefe09bc9ad086bac27a5fd90d46c6ae46adf8701fafce272f6fe15120459
Exchange
sha256:35a3d43cddfe0f7a12a93752f2c81a58a5efb020daeff286d8b60643b36516c8
Resource metadataGET cad.onshape.com/.well-known/oauth-protected-resource/api/v17/documents200252 ms
Request
GET https://cad.onshape.com/.well-known/oauth-protected-resource/api/v17/documents
Response
200 · text/html · 1425 bytes
Body
sha256:526d7dc581b1329831e43101c41106a8b91c2310f6343e0a01bb9d80fbd7a95c
Exchange
sha256:eff6bab20bc4aaaa13ee465a425ed9c415ce196b11da3c6bb517516605e9583d
Resource metadataGET cad.onshape.com/.well-known/oauth-protected-resource200257 ms
Request
GET https://cad.onshape.com/.well-known/oauth-protected-resource
Response
200 · text/html · 1425 bytes
Body
sha256:526d7dc581b1329831e43101c41106a8b91c2310f6343e0a01bb9d80fbd7a95c
Exchange
sha256:36d96d3b496de3462eab54d1a125d84ba764dcbc8386f5abf1d2b4def10f9692
Declared pageGET www.onshape.com/en/sign-up20080 ms
Request
GET https://www.onshape.com/en/sign-up
Response
200 · text/html · 129259 bytes
Body
sha256:876c3c766160955552118d25991edbe10ff5e541e9184fb915f16f447e56d814
Exchange
sha256:10f46d7dc6b2bb9ae8145e80da39f069d4ad78f8d2c81ce1f525078e6798d181

Onshape on the startup-offers board

The grade’s badge

One image that keeps itself current, linking here.

Live badge for Onshape REST API, agent grade: B+[![agent grade](https://sourcey.com/badges/agent-readiness/arp_01m4t96s3q880nvdh2krrpad7r.svg)](https://sourcey.com/c/onshape/agent-readiness/onshape-rest-api/cad-document-create)

Improve the report

Correct it, probe it again, or improve the path.

Profile
arp_01m4t96s3q880nvdh2krrpad7r
Projection
sha256:45037750f896ae7c0caed75414e8f5f6355d0b99d95e196e4dbbfc6585878755
Policy
kind-2026-10-12.2 · sha256:b612172aad277b54461de84e006815126f2df566563954b02f4432a39cad89ac